This Privacy Policy applies specifically to the Renta product (“Renta”, “we”, “us”, “our”, “the App”, or “the Platform”). It explains how we collect, use, disclose, and safeguard your personal data when you use Renta, including data obtained through our verification, open banking, and payment partners in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable UK data protection laws.

1. Data Controller

Renta is operated by Trocah Technology Limited, a company registered in England and Wales (Company No. 14672514), with registered office at 128 City Road, London, EC1V 2NX, United Kingdom. Trocah Technology Limited is registered with the Information Commissioner’s Office (ICO) under registration number ZB622565 and acts as the Data Controller for all Renta user data.

2. Data We Collect

In providing Renta, we may collect and process the following categories of personal data:

• Personal identification data: Full name, date of birth, address, email, phone number, and any verification documents provided.
• Financial and account information: Bank details, income data, rent payment history, and other financial indicators (as provided via third-party integrations such as Experian, GoCardless).
• Device and usage data: Device type, IP address, operating system, app version, and activity logs for fraud prevention and analytics.
• Marketing preferences and communication data: Your consents, responses, and interactions with our messages or promotions.

We collect this data directly from you during onboarding and through integrations with our regulated service partners.

3. How We Use Your Data

We use your personal data to:

• Verify your identity and assess eligibility for Renta services.
• Enable rent payment data collection or verification through GoCardless.
• Provide, maintain, and improve the Renta app and user experience.
• Manage your Renta account, provide support, and deliver relevant product updates.
• Detect and prevent fraud, misuse, suspicious activity, and unauthorised access.
• Communicate with you about your account, support requests, and product updates.
• Send relevant product communications or marketing (only where consent is provided).
• Comply with legal and regulatory obligations under the FCA and data protection laws.

4. Data Sharing and Third Parties

We share your data only where necessary and only with trusted third parties, including:

To deliver Renta’s services, we share your personal data only with trusted, regulated third-party partners who help us operate our platform securely and compliantly:

• Experian Ltd – used for credit and affordability checks. Experian acts as an independent data controller. Their privacy policy is available at www.experian.co.uk/crain (Credit Reference Agency Information Notice (CRAIN)).
• GoCardless Ltd – used to verify rent-related transactions. When you connect your bank account, your personal and banking details (including name, account number, and sort code) are shared securely with GoCardless. GoCardless acts as a data processor on behalf of Trocah Technology Limited and handles your data in accordance with its privacy policy at https://gocardless.com/privacy.
• Service Providers and Contractors – such as KYC platforms, hosting, analytics, and customer support providers who process data on our behalf under strict confidentiality and data protection terms.

All third-party service providers, including GoCardless and Experian, are required to handle your personal data in compliance with UK GDPR, the Data Protection Act 2018, and FCA payment regulations.

5. Consent and User Controls

When you choose to connect your data (e.g. via GoCardless or a linked account), you will be asked for explicit consent. You may withdraw your consent at any time via the app settings or by emailing dpo-uk@trocah.com, but doing so may affect your access to certain Renta features. We log and store your consent choices to demonstrate compliance with the UK GDPR and ICO requirements.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. When your Renta account is closed, we will delete your data but we may retain limited data for regulatory compliance or dispute resolution for up to six (6) years, after which it will be securely deleted or anonymised.

7. Your Rights

Under UK GDPR, you have the following rights: access your personal data; request correction or deletion of data; restrict or object to data processing; data portability; withdraw consent for marketing or Experian data connection. To exercise your rights, contact us at privacy@trocah.com.

8. Data Security

We employ robust technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction. This includes encryption, access controls, secure hosting, and regular security assessments. Access is limited to authorised personnel only.

9. International Transfers

Where data is processed outside the UK (e.g. in cloud hosting environments), we ensure it is protected under UK-approved transfer safeguards such as UK Standard Contractual Clauses (SCCs).

10. Contact Information

For any questions, concerns, or data-related requests, please contact:

• Trocah Technology Limited
• Data Protection Officer (DPO)
• Email: dpo-uk@trocah.com
• Address: 128 City Road, London, EC1V 2NX, United Kingdom

If you are not satisfied with our response, you may raise a complaint with the Information Commissioner’s Office (ICO) via www.ico.org.uk.

11. Updates to This Addendum

We may update this Addendum periodically to reflect changes in law or our practices. Updates will be posted on our website with the “Last Updated” date revised accordingly.

Not only will we be able to work with you more closely to manage your tenancy agreement, your track record as a tenant will enable Experian to use the information supplied to them to assist other landlords and organisations to:

• Assess and manage any new tenancy agreements you may enter into;
• Assess your financial standing to provide you with suitable products and services;
• Manage any accounts that you may already hold, for example reviewing suitable products or adjusting your product in light of your current circumstances;
• Contact you in relation to any accounts you may have and recovering debts that you may owe;
• verifying your identity, age and address, to help other organisations make decisions about the services they offer;
• Help to prevent crime, fraud and money laundering;
• Help to prevent crime, fraud and money laundering;
• Help to prevent crime, fraud and money laundering;
• Screen marketing offers to make sure they are appropriate to your circumstances;
• For Experian to undertake statistical analysis, analytics and profiling,
• And for Experian to conduct system and product testing and database processing activities, such as data loading, data matching and data linkage.

If you would like to see more information on these, and to understand how the credit reference agencies each use and share rental data as bureau data (including the legitimate interests each pursues) this information is provided in this link: www.experian.co.uk/crain (Credit Reference Agency Information Notice (CRAIN)). (For a paper copy, please get in touch with us or with Experian using the contact details
Experian | The Sir John Peace Building | Experian Way | NG2 Business Park | Nottingham | NG2 1EP).

You are eligible for Rent Recognition with Experian only if your name is on the tenancy agreement and you pay rent to the person who owns the property directly or you pay an agent on their behalf. If you pay a housemate and they pay on your behalf or you pay in another way, like in cash, then sadly we cannot recognise these payments yet. We need to see a pattern of payments for you to get the benefit, so we will wait until we see 6 consistent payments before we report to Experian, but once you have reached that mark then you will get the benefit for every payment. You are making a consistent payment if you pay the same rental amount, to the same payee on your rent payment date. When your tenancy changes in any way, you can update these details with us and we will update Experian regarding this so that your rental payments can continue to be recognised. We will share a few key pieces of data with Experian, they are data to identify you, name, date of birth and address and then the record that you have paid rent. We will continue to exchange information about you with Experian while you have a relationship with us. Experian will hold your rental data for the time limits explained in CRAIN (section 7). Rental data falls into the Identifiers (e.g. your name, address, date of birth) and financial account categories (i.e. tenancy account, rental payment information). We and Experian will ensure that your information is treated in accordance with UK data protection law, so you can have peace of mind that it will be kept secure and confidential and your information will not be used for prospect marketing purposes.

If you would like advice on how to improve your credit history you can access independent and impartial advice from www.moneyadviceservice.org.uk (you can get a copy of your Statutory Credit Report by visiting www.experian.co.uk/consumer/statutory-report). If you are unhappy with anything relating to Rental Exchange, please contact us on the contact details above. You also have the ability to get in touch with the Information Commissioner’s Office. More information about this can be found using this link here: https://ico.org.uk/concerns/.

Trocah Technology Ltd is registered with the Information Commissioner’s Office (ICO) under registration reference ZB622565.

Eligibility and Recency of Rent Data

Renta by Trocah reports users' rental payment data to support credit file building. To maintain data integrity and ensure accurate credit reporting, the following terms apply:

• Renta will only collect and report rental payment data that is recent, consecutive, and relates to the user's current or most recent tenancy.
• Tenancy agreements and associated payment data must relate to a rental address the user currently occupies or has occupied within the preceding six (6) months.
• Renta does not process or report historic, inactive, or non-consecutive rent payment data.
• Users are responsible for ensuring that the information and documentation provided (including tenancy agreements and bank transaction data) are accurate and current.
• Where older or invalid tenancy data is submitted, Renta reserves the right to exclude such data from reports sent to Experian.